Posted
by
Unknown Lameron Wednesday July 16, 2014 @09:27AM
from the what-is-security dept.

An anonymous reader writes Attorney General Eric T. Schneiderman issued a new report examining the growing number, complexity, and costs of data breaches in the New York State. The report reveals that the number of reported data security breaches in New York more than tripled between 2006 and 2013. In that same period, 22.8 million personal records of New Yorkers have been exposed in nearly 5,000 data breaches, which have cost the public and private sectors in New York upward of $1.37 billion in 2013. The demand on secondary markets for stolen information remains robust. Freshly acquired stolen credit card numbers can fetch up to $45 per record, while other types of personal information, such as Social Security numbers and online account information, can command even higher prices.

This is also the state where the Commissioner of Education, John King, had a talk about New York's implementation of Common Core. The talk was overrun with parents who had issues with the implementation specifically (and some with Common Core in general). There were a lot of questions they wanted to ask and a lot of answers they wanted to get. Instead, King cut the meeting short, cancelled the rest of his tour, and said that "special interest groups" were to blame. (Parents are apparently now a special

Don't forget our illustrious governor, who refuses to communicate with his staff via email, favoring phone calls and Blackberry Pin-to-Pin messaging instead, so as to sidestep records laws. I'm glad he's kept up on his promise to be the most transparent administration in state history.
http://www.nydailynews.com/new... [nydailynews.com]
http://www.nytimes.com/2012/07... [nytimes.com]

Yup. I usually vote for the Democrat candidates, but I won't vote for him again. The problem is that I don't like the Republican candidates either. So I'll likely vote for a third party candidate. I know they won't have a realistic chance of winning the election, but it will be a protest vote. If enough people protest by voting third party, maybe the two major parties will pay attention.

Perhaps it's time for companies to realise that they cannot keep data secure. That they will never be able to build, much less be willing to pay for, the security required to keep this information under any kind of seal.

Perhaps it's time for companies to ask themselves: "Do we really need to store this?".

This was one big reason why, when New York said they were going to upload students' data into the Bill Gates Foundation's InBloom system, I was opposed. The data (including some very personal info like medical diagnoses) would have been upload to an Amazon cloud drive. As if "cloud drives" are never hackable.

(The other reason I was opposed was that lawmakers specifically made an exception to the data sharing laws so that data could be uploaded to InBloom whether or not parents wanted it uploaded. Not onl

Perhaps it's time for companies to realise that they cannot keep data secure. That they will never be able to build, much less be willing to pay for, the security required to keep this information under any kind of seal.

Perhaps it's time for companies to ask themselves: "Do we really need to store this?".

It's beyond that... as you said, data is unsecurable even if they don't store it. So why is it possible for someone from eastern Europe that doesn't even speak English to charge something in my name and have it shipped overseas with nothing more than the info on my Visa card?

This is entirely the fault of Visa/Mastercard and other credit agencies. They should be eating the costs of this fraud wholesale. They could end it tomorrow but in the name of getting us as far in debt to them as possible, they've throw

Say, full damage caused, including $100 per hour the person affected had to spent clearing this up, with at least 10h assumed and no need to prove anything for them. With that, companies might just start to care about the security of customer data. Currently, they basically have no incentives to spend any money on secure coding, security reviews and the like.

We assumed it to be confusing because we wanted to assume you knew what you meant but just didn't get the point across well

No, you did not understand the point, which was so simple that any idiot should be able to understand it. Apparently, I did not aim sufficiently low for my audience.

If you have a specific objection, then make it. Otherwise, admit that your entire argument is "that's stupid", which is no argument at all. Instead of argument, you are relying upon moderation to suppress mine. That's because you don't have an argument. If you had, you'd have used it.

In Islamic countries, it's illegal to earn money off debt, and their civilization is growing. It's a perfectly functional way to operate. I went looking for an Islamic bank myself, but there weren't any close enough for me to do business with them.

Years ago, when static electricity was bad news for computers, I had the idea for a "data processing shoe" that would have a little conductive ribbon that would drag along the floor and ground out static electricity. Such a thing is of course no longer needed, but given the apparent popularity of data breeches these days maybe the concept could be resurrected as a fashion statement.

Companies have proved they do not care about your data and are willing to essentially give it away via breaches. And *nothing* is ever done about preventing identity theft, because the burden of fixing it is up to the individual, not the credit card issuer, and not the large faceless corporation that saved $20 on security software, but let the hackers in to take your identity in the first place.

They then promise to fix the problem, but then never do. And government looks the other way because they are in th

The costs of attempting to BE compliant to these vague horrible laws is far higher than the cost of losing control over something. This is why HIPAA is a huge waste of time and effort. It costs millions to 'comply' with the law but the downside is near zero because, and this is important

YOU HAVE TO PROVE INTENT

So any law is going to be ineffectual on its face when it looks only at intent. And specifically, the intent to profit from it. Target didn't intend to break something. They goofed up. So the law does

It's a $1.37 billion dollar boost to the economy! You can't just print money for banksters without spreading it around a little bit!

When the money gets stolen, its insured by the government that just prints some more, and paper grows on trees!

Finally we have found a growth industry with real American entrepreneurship that is compatible with current fiscal policy. We can re-hypothecate futures on funny money stolen by criminals that aren't bank executives! Its a new system of cheques and balances